Law Enforcement Guidelines

Last updated: August 31, 2026

This page is for law enforcement and legal process. If you are a Buhata customer with a question, you want [email protected] instead.

Where to send legal process

Subpoenas, court orders, search warrants and preservation requests go to [email protected]. Service by email reaches us fastest and is the route we prefer. Postal service can be made to Buhata LLC at the address in the Terms.

Buhata LLC is a United States company. We respond to United States legal process directly. Requests from outside the United States generally need to come through a mutual legal assistance treaty or letter rogatory, unless the request is a preservation request, which we will honor from any jurisdiction.

Preservation requests

We will preserve an account’s existing records for 90 days on a written request under 18 U.S.C. § 2703(f), and for a further 90 days on renewal. A preservation request freezes what already exists. It is not a production, it does not stop the account holder from using the account, and it does not by itself let us hand anything over.

What we can produce, and what we cannot

What exists depends on what the account holder chose to store, so we cannot promise any particular record exists. In general terms:

• Basic subscriber information, meaning the account email, the dates the account was created and last used, and the plan it holds.
• Billing records, which are held by our payment processor rather than by us, so a request for card details or transaction history goes to them.
• Account content, meaning what the person entered into the app, which requires a search warrant based on probable cause.

We do not hold plaintext passwords. We do not hold bank credentials: where a customer has connected a bank, that connection is held as a token issued by our banking provider and it cannot be used to read an account outside Buhata. We do not have a mechanism to intercept anything in real time, and we will not build one for a single request.

What we require

Valid legal process, issued by a body with jurisdiction, identifying the account precisely, usually by the email address on it. A request naming a person but no account identifier is not something we can act on, because we cannot search by name.

We construe requests narrowly. If process asks for everything about an account when the investigation concerns one week, we will say so and ask for a narrower order rather than over-produce.

Telling the account holder

Our policy is to notify the account holder before producing their information, and to give them time to object, unless we are legally prohibited from doing so or we believe there is a risk of death or serious physical injury. If you need us not to notify, the order has to say so.

Emergencies

If there is an emergency involving a danger of death or serious physical injury to any person, write to [email protected] with EMERGENCY in the subject line and describe the emergency, the harm you are trying to prevent, and why the information is needed now. We review these immediately and may disclose voluntarily under 18 U.S.C. § 2702 where the standard is met.

Cost and format

We do not charge for responding. Records are produced electronically. We will provide a declaration of authenticity if the request asks for one.

Contact

Legal process: [email protected]. Child safety matters: [email protected]. Security reports: [email protected].

Buhata LLC, United States. Our full postal address is in the Terms.